how to use saslauthd AND sasldb

[Andrew J Caird]

On Mon, 28 Jun 2004, Jukka Salmi wrote:

> Hello,
>
> is it possible to configure Cyrus IMAPd (2.2.6, Cyrus SASL 2.1.18) to
> use both saslauthd and sasldb?
>
> The problem I want to solve: some users are stored in Kerberos, some are
> in a sasldb. I'd like Cyrus IMAPd to contact saslauthd (for plaintext
> authentication with the kerberos service), and, if this fails, to try to
> authenticate the user against the sasldb - or vice versa.
>
> Using saslauthd _or_ sasldb (via auxprop plugin) works fine; however, I
> don't know to make PLAIN logins work with both mechanisms - in case
> that's possible at all.

Jukka,
  I think you can do this by listing multiple methods after the
"sasl_pwcheck_method" option in imapd.conf, for example:
	sasl_pwcheck_method: saslauthd auxprop
  I do this to authenticate users via LDAP, but authenticate the admin
user locally via sasldb.
  If I'm doing this wrong, let me know! :)
--
Andrew
---
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html